Description
WordPress Plugin Download Plugin is prone to a vulnerability that lets attackers download arbitrary directories because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Download Plugin version 1.0.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.2 or latest
References
Related Vulnerabilities
WordPress Plugin Product Catalog SQL Injection (4.2.2)
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-43665)
WordPress Plugin Secure Copy Content Protection and Content Locking SQL Injection (2.6.6)
MySQL Other Vulnerability (CVE-2004-0837)
WordPress Plugin Cimy User Extra Fields Arbitrary File Upload (2.3.7)